
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/CA726EB27D6411F0A526106EC4F9AE02.roa
File: CA726EB27D6411F0A526106EC4F9AE02.roa (raw, json)
Hash identifier: HJaToLePFZB89VkW0fGyPEdHzI89CWSnjN5awLA7vSM=
Subject key identifier: A8:D5:81:93:E5:EF:36:73:B2:CA:E3:F1:3B:4C:DF:3D:40:1E:D4:22
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0BB6
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/CA726EB27D6411F0A526106EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:17:41 +0000
ROA not before: Wed 22 Oct 2025 04:09:20 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136989
IP address blocks: 223.119.202.0/24 maxlen: 24
223.119.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2998 (0xbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Oct 22 04:09:20 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a482c4-0017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:e2:87:f3:8b:41:73:1e:d5:7f:99:0f:2d:
fe:36:c4:b9:56:d9:18:72:60:59:d6:3d:f6:63:ef:
81:37:93:27:7b:c2:c0:03:e2:9a:0f:a2:a5:3d:0c:
4c:df:0b:ad:92:6d:22:ad:84:23:a4:e6:5a:71:8e:
62:43:1e:0c:3a:0d:3b:cc:31:27:bc:73:a6:74:a4:
75:36:11:a4:ef:91:f9:4f:6c:6d:97:f0:90:c8:68:
dc:07:bb:3f:56:a7:e3:bd:22:2b:99:16:7c:cd:1d:
c2:35:1e:69:7e:94:09:ad:a3:f1:af:99:76:d1:18:
bb:f2:cf:08:93:11:41:0e:7c:47:62:d4:44:4e:53:
cc:3a:b5:6a:97:61:a4:94:46:4e:f1:8d:f0:37:be:
58:c6:55:32:ef:db:8b:bf:3e:66:41:59:71:c8:28:
25:bf:09:17:4c:1f:d4:f6:cb:d1:c7:85:f2:21:8b:
97:77:98:ab:5a:62:98:7b:81:88:28:99:69:c0:c6:
5f:fd:4f:4e:2f:4b:9f:ec:af:e5:35:0e:b3:22:7a:
56:16:8d:9a:54:79:ff:4d:16:d2:bc:ec:50:65:21:
19:98:b1:bb:02:f1:e8:8b:fe:0b:4b:b4:fa:0a:fc:
49:08:98:04:48:47:6c:cf:a9:cd:a8:4b:3c:4e:46:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:81:93:E5:EF:36:73:B2:CA:E3:F1:3B:4C:DF:3D:40:1E:D4:22
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/CA726EB27D6411F0A526106EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
223.119.202.0/23
Signature Algorithm: sha256WithRSAEncryption
51:7e:5f:07:cf:88:6c:53:51:f9:88:4d:7b:2c:ac:f1:2d:a4:
81:dd:fb:36:b2:3e:70:d2:ad:19:17:24:ea:04:b2:d7:9b:d3:
7d:89:43:a5:68:be:82:fb:34:26:d2:69:7c:41:c1:bb:b7:88:
1b:76:5c:02:ff:8c:20:47:6e:4f:5f:43:78:53:c8:86:35:fb:
8a:d4:66:e8:9e:f3:a3:af:19:0f:0b:91:64:ff:48:fe:c1:25:
07:69:5d:16:94:3b:b7:1d:9c:cd:2b:8b:75:bb:0e:b5:55:52:
c2:8c:c9:de:7e:c0:f4:da:f1:ae:5b:cf:2b:5b:6b:1a:56:ab:
1b:52:f9:f0:be:be:a6:8a:ff:ba:53:69:33:33:77:55:90:a5:
fe:0f:a1:68:c3:d2:5d:3d:3a:09:2b:95:9b:f7:1e:ab:15:2d:
06:96:de:19:ef:91:af:44:26:3a:63:77:36:24:e5:63:da:a5:
66:24:f9:ce:3b:61:30:5f:61:ed:8c:9e:95:60:f5:b2:ff:82:
06:3d:43:30:55:ef:3a:49:9c:8c:6c:42:26:30:1b:de:4c:a1:
80:d7:54:82:84:26:d8:67:f4:1a:31:7a:04:97:0c:b0:c3:23:
75:d8:c3:5f:d7:af:af:33:61:4e:90:e5:32:9b:0f:a8:bf:89:
64:5f:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:45 2026 by rpki-client